nerdexam
(ISC)2

CGRC · Question #660

A SCAP specification that provides unique, common names for publicly known information system vulnerabilities. Response:

The correct answer is A. Common Vulnerability and Exposures (CVE). Common Vulnerability and Exposures (CVE) is a SCAP specification that assigns unique names to publicly known information system vulnerabilities.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

A SCAP specification that provides unique, common names for publicly known information system vulnerabilities. Response:

Options

  • ACommon Vulnerability and Exposures (CVE)
  • BCommon Vulnerability Scoring System (CVSS)
  • CContinuity of Operations Plan (COOP)
  • DDisaster Recovery Plan (DRP)

How the community answered

(18 responses)
  • A
    89% (16)
  • C
    6% (1)
  • D
    6% (1)

Why each option

Common Vulnerability and Exposures (CVE) is a SCAP specification that assigns unique names to publicly known information system vulnerabilities.

ACommon Vulnerability and Exposures (CVE)Correct

Common Vulnerabilities and Exposures (CVE) is a Security Content Automation Protocol (SCAP) specification that provides a standardized naming convention to uniquely identify and describe publicly known information security vulnerabilities.

BCommon Vulnerability Scoring System (CVSS)

The Common Vulnerability Scoring System (CVSS) provides a numerical score to quantify the severity of a vulnerability, not a unique common name for it.

CContinuity of Operations Plan (COOP)

A Continuity of Operations Plan (COOP) is a strategic plan for an organization to continue essential functions during an emergency, unrelated to vulnerability naming.

DDisaster Recovery Plan (DRP)

A Disaster Recovery Plan (DRP) focuses on the recovery of IT systems and infrastructure after a disaster, which is distinct from vulnerability identification.

Concept tested: SCAP - Common Vulnerability and Exposures (CVE)

Source: https://cve.mitre.org/about/

Topics

#CVE#Vulnerability identification#SCAP#Security standards

Community Discussion

No community discussion yet for this question.

Full CGRC Practice